We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e87e543 commit 133b016Copy full SHA for 133b016
javascript/ql/lib/semmle/javascript/security/TaintedUrlSuffix.qll
@@ -80,11 +80,6 @@ module TaintedUrlSuffix {
80
name = StringOps::substringMethodName() and
81
not call.getArgument(0).getIntValue() = 0
82
or
83
- // Split around '#' or '?' and extract the suffix
84
- name = "split" and
85
- call.getArgument(0).getStringValue() = ["#", "?"] and
86
- not exists(call.getAPropertyRead("0")) // Avoid false flow to the prefix
87
- or
88
// Replace '#' and '?' with nothing
89
name = "replace" and
90
call.getArgument(0).getStringValue() = ["#", "?"] and
0 commit comments